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DETAILED ACTION 

Claim Rejections - 35 USC § 103 

1 . The following is a quotation of 35 U.S.C. 1 03(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 102 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

2. The factual inquiries set forth in Graham v. John Deere Co., 383 U.S. 1 , 148 
USPQ 459 (1966), that are applied for establishing a background for determining 
obviousness under 35 U.S.C. 103(a) are summarized as follows: 

1 . Determining the scope and contents of the prior art. 

2. Ascertaining the differences between the prior art and the claims at issue. 

3. Resolving the level of ordinary skill in the pertinent art. 

4. Considering objective evidence present in the application indicating 
obviousness or nonobviousness. 

3. Claims 68 to 87, 95, 97 to 1 00, 1 02, and 1 03 are rejected under 35 U.S.C. 1 03(a) 
as being unpatentable over Alcorn, et al. (U.S. patent 5,643,086 A) in view of Davis 
(U.S. patent 5,539,828 A) and Ohno (U.S. patent 5,355,413 A). 

1 . As to Claim 68: Alcorn discloses all of the limitations of Claim 68, but lacks 
specificity as to an external authentication agent apparatus and a transmitted 
authentication algorithm. Alcorn teaches a system for verifying at least one digital 
medium in a gaming machine (Abst), said system comprising: an authentication agent, 
wherein said authentication agent is external to said gaming machine and further 
wherein said authentication agent (external gaming authority, 2:27-32, 3:13-21, 6:47- 
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56): transmits verification information to said gaming machine; receives from said 
gaming machine an outcome of said verification; compares said received outcome with 
an expected outcome; and authenticates said gaming machine if said received outcome 
matches said expected outcome (Figs. 4 & 5; 3:35-55, 4:49-58, 8:38-52). Alcorn 
teaches an authentication program stored on ROM 29 (Fig. 2, 7:16-19), comprised of 
message digest program 32, decryption program 33, and decryption key 34 (Fig. 3, 
7:26-40). Alcorn teaches verifying the content of ROM 29 which comprises a plurality of 
files as claimed, which would include its authentication program (8:39-53, contents of 
ROM 29 may be verified with hash function stored securely such as with a gaming 
commission; this verification may be carried out on demand at any time, such as over 
the network, 8:8:53-62, also 3:3:15-20 & 4:49-53). 

2. Davis, however, teaches an external authentication agent apparatus (7:25-55, 
describing the method of Fig. 8). Davis teaches a remote system generating a 
challenge (step 330, Fig. 8); transmitting a challenge to the hardware agent system 
(step 335, Fig. 8); the hardware agent encrypting with a private key its response and 
transmitting the response to the remote agent, or receiving by the remote agent an 
outcome of the verification algorithm (steps 340, 345, and 350, Fig. 8); comparing the 
received outcome with the expected outcome (step 355, Fig. 8); and authenticating the 
hardware agent system (step 360, ensuring that communications are secured, Fig. 8). 
It would have been obvious to one of ordinary skill in the art at the time of invention to 
have applied the verification scheme of Davis to the gaming system of Alcorn. Alcorn 
teaches an external authentication agent (gaming commission, 8:54-62), which is able 
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to verify the contents of any of the memory devices on a gaming machine at any time 
via a remote request over the network; the gaming commission has a custodial version 
of the memory contents in its custody, so it is able to verify the results of any verification 
algorithm sent back to it by a gaming machine (8:38-53, 3:13-20). Alcorn also teaches 
a private key stored custodially by a third party used for verifying memory contents 
encrypted using the key and decrypted using a public key. This modification would 
allow the authentication agent's (gaming commission's) authentication agent apparatus 
to send an algorithm to the gaming machine over the network, verify the contents of the 
gaming device's memory devices using the verification algorithm, and compare the 
result of the verification of the gaming device's memory contents with the custodial 
version held by the gaming commission. Such a modification in which the Alcorn's 
ROM 29 containing the authentication program is remotely verified by the gaming 
commission (Alcorn, 8:38-62) is very similar to the way the ROM 29 with the 
authentication program is able to verify using encryption the contents of the gaming 
machine's mass storage, which may be stored in a network drive (Fig. 5, 8:1-25, 6:47- 
57). Both aspects of Alcorn are remote authentication via encryption of memory 
devices over a network. Alcorn specifically teaches generating a hash from the 
contents of ROM 29 and comparing it with the custodial version held by the gaming 
authority (8:38-53); this could be done by the gaming commission sending a key to the 
gaming device, the key not being known to the gaming device until it is received, the 
gaming device generating a hash message of ROM 29's contents and sending them 
back to the gaming commission, and the gaming commission comparing the hash 
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message to its own custodial version of ROM 29. This modification would have the 
advantage of enabling the gaming commission to remotely verify the contents of ROM 
29 which contains the program used to verify the other memory contents of the gaming 
machine, by using a verification algorithm which is not known to the gaming device until 
the time of verification; this would have the advantage of preventing any unauthorized 
modifications to the authentication program in ROM 29 since the algorithm will not be 
known in advance, and the verification process could happen at any time for any 
reason. 

3. Ohno, however, teaches an authentication algorithm transmitted from one device 
to another (Fig. 15, transmission of random number 142, is encryption algorithm 
received? yes/no 143, encryption algorithm is loaded 144, authentication process 145). 
This is in reference to the transmission unit 27 and IC card 13 of Fig. 14 (8:34-54): "in 

this embodiment, after the IC card 13 generates a random number (R) (step 
142), the transmission unit 27 transmits the encryption algorithms (f'l) 
(g'l) to the IC card 13 (step 143). The IC card 13 loads the encryption 
algorithms (f'l) (g'l) in either the areas 3-a and 3-b of RAM 3 or empty areas 
5-i and 5-j of the data memory 5 (step 144) . Thereafter, the same 
authentication operation as that executed in the previous embodiments is 

terminal unit to the IC card prior to the §B|^SBSffPP process can be 

applied to each of the previous embodiments." That an encryption algorithm will 
have a plurality or sequence of steps is evidenced by Hershey, et al. (U.S. patent 
5,239,584 A, 1 :48-52). It would have been obvious to one of ordinary skill in the art at 
the time of invention to have applied the transmission of the authentication algorithm 
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over the network as taught by Ohno to the combination of Alcorn and Davis. Alcorn 
teaches an authentication program stored on ROM 29 (Fig. 2, 7:16-19), comprised of 
message digest program 32, decryption program 33, and decryption key 34 (Fig. 3, 
7:26-40). Alcorn suggests the desirability of verifying the content of ROM 29, which 
would include its authentication program (8:39-53, contents of ROM 29 may be verified 
with hash function stored securely such as with a gaming commission; this verification 
may be carried out on demand at any time, such as over the network, 8:8:53-62, also 
3:3:15-20 & 4:49-53). The gaming commission would necessarily have an 
authentication apparatus such as that suggested by Davis to generate such an 
algorithm. The advantage of this modification would be to transmit to the gaming device 
an authentication algorithm pertaining to encryption instead of merely a 
challenge/response query, making the authentication process more secure as the 
gaming device would never have the algorithm for authenticating ROM 29 stored locally, 
as it would only be known by the gaming commission. The local gaming device would 
thus only receive this authentication algorithm at the time it is used; since the algorithm 
would not be stored locally, it would be extremely difficult to tamper with the gaming 
device undetected. 

4. As to Claim 75: Alcorn teaches method for verifying at least one digital medium 
(Abst., Fig. 1) in a system including gaming machine and an external authentication 
agent (external gaming authority, 2:27-32, 3:13-21, 6:47-56), said method comprising: 
transmitting a verification algorithm to said gaming machine from said external 
authentication agent to said gaming machine; deriving an outcome of said verification 
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algorithm by execution thereof; comparing said derived outcome with an expected 
outcome; and authenticating said gaming machine if said derived outcome matches 
said expected outcome (play permitted if authenticated, Figs. 4 & 5). Receiving the 
outcome from the gaming machine is addressed in the rejection of Claim 68. The new 
limitations of Claim 75 are addressed above regarding Claim 68. 

5. As to Claim 79: Alcorn teaches gaming device comprising: a gaming controller 
(Abst., Fig. 1); a data storage device storing data files and data corresponding to a valid 
verification signature (Fig. 2); an apparatus for loading data external from said gaming 
machine to said storage device, said apparatus transmitting an authentication agent 
(external gaming authority, 2:27-32, 3:13-21, 6:47-56); and a processor to process said 
authentication agent to derive a verification signature and compare said derived 
signature to said valid signature (Figs. 4 & 5). The new limitations of Claim 79 are 
addressed above regarding Claim 68. 

6. As to Claim 80: Alcorn teaches method for presenting at least one game to a 
player at a gaming machine (Abst., Fig. 1; player permitted to play or not, Figs. 4 & 5), 
said method comprising: storing at least one of program code and program data in a 
digital medium (Figs. 1 & 2); transmitting via a communication link at least one of a 
program code or program file data and data corresponding to a verification algorithm to 
said gaming machine from an authentication agent (external gaming authority, 2:27-32, 
3:13-21, 6:47-56); processing said verification algorithm to derive an outcome and 
comparing said outcome to one of an authorized outcome stored in said digital medium 
or transmitted with said algorithm and authorizing said transmitted program code or 
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program file data if said derived and stored outcomes compare (Figs. 4 & 5). Receiving 
the outcome from the gaming machine is addressed in the rejection of Claim 68. The 
new limitations of Claim 80 are addressed above regarding Claim 68. 

7. As to Claim 95: Alcorn teaches a system for monitoring a gaming machine (Abst., 
Fig. 1), said system comprising: a regulating agent for monitoring at least a portion of 
said gaming machine, wherein said regulating agent generates a request for an 
authentication agent (external gaming authority, 2:27-32, 3:13-21, 6:47-56), and 
wherein said authentication agent is configured to: compare a received outcome from a 
verification algorithm at said gaming machine with an expected outcome; and 
authenticate said gaming machine if said received outcome matches said expected 
outcome (Figs. 4 & 5). Receiving the outcome from the gaming machine is addressed 
in the rejection of Claim 68. The new limitations of Claim 95 are addressed above 
regarding Claim 68. 

8. As to Claim 69: Alcorn teaches the external agent prompting the gaming machine 
to request and execute said verification algorithm for said at least one digital medium 
and enrolls said gaming machine when said received outcome matches at least one of 
a set of predetermined criteria (game play permitted if match exists, Fig. 5, Alcorn). 

9. As to Claim 70: Alcorn teaches the request and execution of said verification 
algorithm being carried out based on at least one of a request of said gaming machine, 
a request of a player of said gaming machine, a request of an authorized agent, and 
upon a randomly or periodically scheduled event (Alcorn, external gaming commission, 
3:22-33). 
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1 0. As to Claim 71 : Alcorn teaches a data structure configured to historically store 
said received outcome (Alcorn, log of game play, credits, diagnostic information, 6:20- 
26). 

11. As to Claim 72: Alcorn teaches the verification algorithm comprises the 
verification signature (Alcorn, Figs. 4 & 5). 

12. As to Claim 73: Alcorn teaches a processor configured to process said 
verification algorithm to determine at least one of corruption of said at least one digital 
medium and tampering with said at least one digital medium (unalterable ROM, 
authentication of Figs. 4 & 5 is thus checking for tampering, 2:35-41 , Alcorn). 

13. As to Claim 74: Alcorn teaches the authorization agent is remote to said gaming 
machine and further comprising a communication link between said authorization agent 
and said gaming machine for transmission of said verification algorithm to said gaming 
machine (Alcorn, 3:13-33). 

14. As to Claim 76: Alcorn teaches prompting said gaming machine to request and 
execute said verification algorithm for said at least one digital medium and enrolling said 
gaming machine when said received outcome matches at least one of a set of 
predetermined criteria (game play permitted if match exists, Fig. 5, Alcorn). 

15. As to Claim 77: Alcorn teaches requesting and executing said verification 
algorithm based on at least one of a request of said gaming machine, a request of a 
player of said gaming machine, a request of an authorized agent, and upon a randomly 
or periodically scheduled event (Alcorn, external gaming commission, 3:22-33). 
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16. As to Claim 78: Alcorn teaches storing any received outcome from a gaming 
machine for recollection thereof (Alcorn, digests transmitted to gaming commission for 
audit purposes, 8:22-25,54-62). 

1 7. As to Claim 81 : Alcorn teaches that a player is unable to play said at least one 
game until receipt of said authentication result (Alcorn, Abst.; 8:22-26). 

18. As to Claim 82: Alcorn teaches comprising requesting said authentication result 
upon a player attempting to execute a game (Alcorn, Fig. 5, 8:1-25, authorization 
routine called). 

1 9. As to Claim 83: Alcorn teaches providing at least one of program code and 
program data as a game configured for downloading to said gaming machine, said 
gaming machine requesting said authentication result upon download of a game to said 
gaming machine (Alcorn, authentication done when data downloaded to game device, 
3:13-33; preparation phase, 2:42-57). 

20. As to Claim 84: Alcorn teaches an agent external to said gaming machine 
triggering transmission of said verification algorithm data and at least one of a program 
code or program file data (Alcorn, external gaming commission, 3:22-33). 

21 . As to Claim 85: Alcorn teaches registering said outcome for an audit (Alcorn, 
8:54-62). 

22. As to Claim 86: Alcorn teaches transmitting said verification algorithm data as a 
verification signature (Alcorn, Figs. 4 & 5). 

23. As to Claim 87: Alcorn teaches processing said verification algorithm for 
identification of at least one of corruption of said at least one digital medium and 
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tampering with said at least one digital medium (unalterable ROM, authentication of 
Figs. 4 & 5 is thus checking for tampering, 2:35-41 , Alcorn). 

24. As to Claim 97: Alcorn teaches the regulating agent is an external agent located 
remotely from said gaming machine and remotely monitors at least a portion of said 
gaming machine (Alcorn, remote verification by external agent, 3:13-33). 

25. As to Claim 98: Alcorn teaches that the regulating agent monitors all of said 
gaming machine, and wherein said authentication agent verifies the integrity of said 
gaming machine (Alcorn, 3:13-33). 

26. As to Claim 99: Alcorn teaches the authentication agent being configured to 
verify that said gaming machine satisfies local gaming regulations (Alcorn, gaming 
commission audits, 8:54-62). 

27. As to Claim 100: Alcorn teaches that the regulating agent monitors software and 
peripheral devices of said gaming machine (Alcorn, all memory devices in architecture 
checked, 3:55-67). 

28. As to Claim 102: Alcorn teaches that the verification algorithm detects tampering 
or rigging of software within said gaming machine (Alcorn, 8:1-25). 

29. As to Claim 103: Alcorn teaches that the authentication agent authenticates data 
stored on a digital medium in said gaming machine (Alcorn, 8:1-25, Figs. 4 & 5). 

Response to Arguments 

30. Applicant's arguments filed 05-24-2010 have been fully considered but they are 
not persuasive. The applicant's present remarks are drawn to the examiner's last 
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rejection and arguments, and are not drawn to the present citation in the claims of an 
3authentication algorithm comprising a plurality of steps, as the examiner believes is 
suggested by Ohno, discussed above. 

31 . The examiner had previously argued that Alcorn discloses transmitting a 
verification algorithm to the gaming machine and receiving the verification algorithm 
from the gaming machine. The applicant appears to intend the examiner to interpret 
that structure such as ROM 29 of Alcorn Fig. 2 is stored and executed externally. The 
applicant previously did not claims what the verification algorithm is. It could have been 
a hash function (Alcorn, Fig. 4, 41), an encryption program (Alcorn, Fig. 4, 43), a 
decryption program (Alcorn, Fig. 5, 33), or a message digest program (Alcorn, 32, Fig. 
3). Alcorn teaches that the gaming data and unique signature are stored externally 
(2:27-32). The game data set is only installed on the gaming machine after 
authentication (2:45-57), so if the gaming data set is stored externally it must receive a 
signal from the gaming machine before it is loaded onto the gaming machine. The 
decryption of Alcorn is done with a public key stored in ROM 29 on the gaming device 
(3:3-6). The game data set on the network is then installed (3:8-12). This will 
necessarily require a signal from the gaming machine. Quoting from 3:35-55: "From an 
apparatus standpoint, the first aspect of the invention comprises an electronic casino 
gaming system for providing authentication of a game data set of a casino type game 
prior to permitting game play, the system including first means for storing a casino game 
data set and a signature of the casino game data set, the signature comprising an 
encrypted version of a unique first abbreviated bit string computed from the casino 
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game data set; second means for storing an authentication program capable of 
computing a second abbreviated bit string from the casino game data set stored in the 
first storing means and capable of decrypting the encrypted signature stored in the first 
storing means to recover the first abbreviated bit string; processing means for enabling 
the authentication program to compute an abbreviated bit string from the casino game 
data set stored in the first storing means and for enabling the authentication program to 
decrypt the encrypted signature; and means for comparing the computed second 
abbreviated bit string with the decrypted abbreviated bit string to determine whether a 
match is present. The first storing means preferably comprises a mass storage device, 
such as a disk drive unit, a CD-ROM unit or a network storage unit. The second storing 
means preferably comprises an unalterable read only memory in which the 
authentication program is stored." The first storing means corresponds to the mass 
storage unit, and the second storage means corresponds to ROM 29 of Alcorn. The 
authentication can be conducted locally or externally via a network (4:49-58). This 
external authentication is used to authenticate ROM 29 in the same manner as ROM 29 
authenticates the mass storage unit and the rest of the contents of the gaming machine 
(8:38-52); in this case the authentication program would necessarily be external to the 
gaming machine. This can be done for example, by the gaming commission (8:54-62), 
so the gaming machine would receive a verification algorithm from the external source 
and send it back to the external authentication agent (9:47-58). 
32. Davis teaches an external authentication agent apparatus (7:25-55, describing 
the method of Fig. 8). Davis teaches a remote system generating a challenge (step 
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330, Fig. 8); transmitting a challenge to the hardware agent system, or transmitting a 
verification algorithm (step 335, Fig. 8); the hardware agent encrypting with a private 
key its response and transmitting the response to the remote agent, or receiving by the 
remote agent an outcome of the verification algorithm (steps 340, 345, and 350, Fig. 8); 
comparing the received outcome with the expected outcome (step 355, Fig. 8); and 
authenticating the hardware agent system (step 360, ensuring that communications are 
secured, Fig. 8). Alcorn teaches an external authentication agent (gaming commission, 
8:54-62), which is able to verify the contents of any of the memory devices on a gaming 
machine at any time via a remote request over the network; the gaming commission has 
a custodial version of the memory contents in its custody, so it is able to verify the 
results of any verification algorithm sent back to it by a gaming machine (8:38-53, 3:13- 
20). Alcorn also teaches a private key stored custodially by a third party used for 
verifying memory contents encrypted using the key and decrypted using a public key. 
This modification would allow the authentication agent's (gaming commission's) 
authentication agent apparatus to send an algorithm to the gaming machine over the 
network, verify the contents of the gaming device's memory devices using the 
verification algorithm (most likely an encryption key), and compare the result of the 
verification of the gaming device's memory contents with the custodial version held by 
the gaming commission. Such a modification in which the Alcorn's ROM 29 containing 
the authentication program is remotely verified by the gaming commission (Alcorn, 8:38- 
62) is very similar to the way the ROM 29 with the authentication program is able to 
verify using encryption the contents of the gaming machine's mass storage, which may 
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be stored in a network drive (Fig. 5, 8:1-25, 6:47-57). Both aspects of Alcorn are 
remote authentication via encryption of memory devices over a network. Alcorn 
specifically teaches generating a hash from the contents of ROM 29 and comparing it 
with the custodial version held by the gaming authority (8:38-53); this could be done by 
the gaming commission sending a key to the gaming device, the key not being known to 
the gaming device until it is received, the gaming device generating a hash message of 
ROM 29's contents and sending them back to the gaming commission, and the gaming 
commission comparing the hash message to its own custodial version of ROM 29. 
33. The crux of the matter is that the examiner does not believe that merely 
transmitting an authentication algorithm from a remote party to a networked gaming 
device contributes anything patentable over Alcorn, since Alcorn already teaches that 
the message digest resulting from the hash function used to verify ROM 29 can be 
transferred over the network back to the casino operator or gaming commission in 
response to a network-initiated authentication command (3:35-55, 4:49-58, 8:38-52); 
authentication information, though not a complete algorithm, is already transmitted to 
the gaming device, the only difference with Adorn is that the claimed algorithm is a 
series of instructions. This verification could also be done with a transmitted 
authentication algorithm comprising a plurality of steps as suggested by Ohno. Ohno 
teaches an authentication algorithm transmitted from one device to another (Fig. 15, 
transmission of random number 142, is encryption algorithm received? yes/no 143, 
encryption algorithm is loaded 144, authentication process 145). This is in reference to 
the transmission unit 27 and IC card 13 of Fig. 14 (8:34-54). That an encryption 
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algorithm will have a plurality or sequence of steps is evidenced by Hershey, et al. (U.S. 
patent 5,239,584 A, 1 :48-52). Alcorn teaches an authentication program stored on 
ROM 29 (Fig. 2, 7:16-19), comprised of message digest program 32, decryption 
program 33, and decryption key 34 (Fig. 3, 7:26-40). Alcorn suggests the desirability of 
verifying the content of ROM 29, which would include its authentication program (8:39- 
53, contents of ROM 29 may be verified with hash function stored securely such as with 
a gaming commission; this verification may be carried out on demand at any time, such 
as over the network, 8:8:53-62, also 3:3:15-20 & 4:49-53). The gaming commission 
would necessarily have an authentication apparatus such as that suggested by Davis to 
generate such an algorithm. The effect of this modification would be to transmit to the 
gaming device an authentication algorithm pertaining to encryption instead of merely a 
challenge/response query, making the authentication process more secure as the 
gaming device would never have the algorithm for authenticating ROM 29 stored locally, 
as it would only be known by the gaming commission. The local gaming device would 
thus only receive this authentication algorithm at the time it is used; since the algorithm 
would not be stored locally, it would be extremely difficult to tamper with the gaming 
device undetected. The examiner respectfully disagrees with the applicant as to the 
claims' condition for allowance. 

Citation of Pertinent Prior Art 

34. The prior art made of record and not relied upon is considered pertinent to 
applicant's disclosure. U.S. patents 5,297,208 A (Schlafly, et al.); 5,267,315 A (Narita, 
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et al.); 5,341 ,426 A (Barney, et al.); 5,321 ,751 A (Ray, et al.); and 4,321 ,672 A (Braun, 
et al.) teach transmitting authentication algorithms. 



Conclusion 

35. Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Matthew D. Hoel whose telephone number is (571) 272- 
5961 . The examiner can normally be reached on 8:00 A.M. to 4:30 P.M.. 

36. If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, David L. Lewis can be reached on (571) 272-7673. The fax phone number 
for the organization where this application or proceeding is assigned is 571-273-8300. 

37. Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
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